Author: Andre Polykanine A.K.A. Menelion Elensúlë
Updated on: 2021-03-30
Posted on: 2021-03-30
Viewers: 291 (March 2021 until December 2021)
Last month viewers: 2 (December 2021)
Package: Oire Colloportus
Read this article to learn how the Colloportus implements its PHP password hashing solution to simplify the implementation of solutions for storing passwords.
In this article you will learn:
Introduction
What Is Colloportus
The Single-File Concept
What Can Colloportus Do
Download or Install Colloportus using PHP Composer
Introduction
My name is Andre, and I would like to present you my Colloportus package. In this post I explain what is Colloportus, why I wrote it and when it can be useful.
What Is Colloportus
Colloportus is a single-file library for password hashing and verification, as well data encryption and decryption. It is actually a simplified fork of ParagonIE's PasswordLock, where I tried to minimize the amount of code without breaking security.
The Single-File Concept
Nowadays, most developers do not care about disk space or amount of files their code takes: a JavaScript framework can take several megabytes, and it is considered normal.
When installing something via Composer, a PHP library usually takes tens of files. However, I believe most libraries with a narrow feature set can be written so they contain one file per library, probably, with one or several single-file dependencies. I call this the single-file concept.
What Can Colloportus Do
Colloportus, being primarily designed for password hashing and verification, it assists in secure hashing, storing and verifying passwords provided by users. There are no backdoors, and a hashed password cannot be transformed to plain text.
However, Colloportus provides also symmetric encryption and decryption features since these are used in password hashing. A password is actually first hashed. Then an authenticated encryption is applied.
Feel free to apply Colloportus as a hashing library for your password handling, as well as an encryption library if for some reason you need some data to be decryptable. Do not use this for storing passwords. Passwordsy must be irreversibly hashed to be secured.
Colloportus usually returns storable and readable data ready to be inserted into databases or configuration files.
Download or Install Colloportus using PHP Composer
I hope you get a glimpse of information about Colloportus and its use. For more detailed explanation on how to use the library, please see its Readme document.
You can download the package archive by going to the download page. Alternatively you can install it using PHP Composer using the instructions that you can find in the package installation page.
You need to be a registered user or login to post a comment
1,590,748 PHP developers registered to the PHP Classes site.
Be One of Us!
Login Immediately with your account on:
 |  | ||
 |  | ||
 |  |
Comments:
No comments were submitted yet.
